hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: Forgejo git-SSH on host port 9200

Browse source
This commit is contained in:
Hernâni Marques 2026-07-10 14:38:28 +02:00
parent dc2262b056
commit b0efda7731
No known key found for this signature in database
5 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

4
2026/2026-07-10--forgejo-rootless.md
View file

@ -18,7 +18,7 @@ Do **not** switch to the non-rootless `forgejo:11` image under rootless podman:
| Path | `/home/hernani/koopa-forgejo/` | | Path | `/home/hernani/koopa-forgejo/` |
| Containers | `koopa-forgejo` (**rootless**), `koopa-forgejo-db` (postgres:16-alpine) | | Containers | `koopa-forgejo` (**rootless**), `koopa-forgejo-db` (postgres:16-alpine) |
| HTTP | host **9024** → Caddy `git.hacktivism.ch` | | HTTP | host **9024** → Caddy `git.hacktivism.ch` |
| SSH (git) | host **2222** → container 2222 (direct; not via Caddy) | | SSH (git) | host **9200** → container 2222 (direct; not via Caddy) |
| ROOT_URL | `https://git.hacktivism.ch/` | | ROOT_URL | `https://git.hacktivism.ch/` |
| Landing | explore (public browse OK) | | Landing | explore (public browse OK) |
@ -60,5 +60,5 @@ sudo systemctl reload caddy
## Notes ## Notes
- DNS already points `git.hacktivism.ch` at koopa (with other hacktivism names). - DNS already points `git.hacktivism.ch` at koopa (with other hacktivism names).
- Git over SSH: `ssh://git@git.hacktivism.ch:2222/…` (open **2222** on firewall/router if WAN access needed). - Git over SSH: `ssh://git@git.hacktivism.ch:9200/…` (open **9200**/tcp on firewall/router if WAN access needed).
- Until Caddy is reloaded, only `http://127.0.0.1:9024` works on host. - Until Caddy is reloaded, only `http://127.0.0.1:9024` works on host.

2
2026/2026-07-10.md
View file

@ -3,4 +3,4 @@
- landing mem snapshot fix (pipeline → 0 B) - landing mem snapshot fix (pipeline → 0 B)
- Caddy redir / → /intro/ (three sites) - Caddy redir / → /intro/ (three sites)
- SECRETS.md paths only; no secret material in admin-log - SECRETS.md paths only; no secret material in admin-log
- **Forgejo rootless** on `git.hacktivism.ch` (:9024 / SSH :2222); no free registration - **Forgejo rootless** on `git.hacktivism.ch` (:9024 / SSH :9200); no free registration

2
README.md
View file

@ -29,7 +29,7 @@ scripts/ # merchant, exchange, monitoring helpers
| `taler-exchange-hacktivism` | exchange | **9011** | | `taler-exchange-hacktivism` | exchange | **9011** |
| `taler-bank-hacktivism` | libeufin-bank (GOA, no IBAN) | **9012** | | `taler-bank-hacktivism` | libeufin-bank (GOA, no IBAN) | **9012** |
| `koopa-castopod` (+ mariadb/redis) | Castopod Fediverse podcast | **9020** | | `koopa-castopod` (+ mariadb/redis) | Castopod Fediverse podcast | **9020** |
| `koopa-forgejo` (+ postgres) | **Forgejo rootless** git | **9024** (+ SSH **2222**) | | `koopa-forgejo` (+ postgres) | **Forgejo rootless** git | **9024** (+ SSH **9200**) |
Start model (Taler): **root** `/root/start_base_services_*` → shell as service user → `/usr/local/bin/start_*.sh [--restart]`. Start model (Taler): **root** `/root/start_base_services_*` → shell as service user → `/usr/local/bin/start_*.sh [--restart]`.
Start model (Castopod): `hernani` → `cd ~/koopa-castopod && podman-compose up -d`. Start model (Castopod): `hernani` → `cd ~/koopa-castopod && podman-compose up -d`.

2
configs/caddy/git.hacktivism.ch.caddy
View file

@ -1,4 +1,4 @@
# 9024 forgejo HTTP (SSH :2222 host-direct, not via Caddy) # 9024 forgejo HTTP (SSH :9200 host-direct, not via Caddy)
# Apply on host: merge into /etc/caddy/Caddyfile, validate, reload # Apply on host: merge into /etc/caddy/Caddyfile, validate, reload
git.hacktivism.ch { git.hacktivism.ch {
header Alt-Svc "clear" header Alt-Svc "clear"

8
configs/forgejo/compose.yml
View file

@ -1,5 +1,5 @@
# koopa-forgejo — ROOTLESS Forgejo image + rootless podman (user hernani) # koopa-forgejo — ROOTLESS Forgejo image + rootless podman (user hernani)
# Site: https://git.hacktivism.ch | HTTP :9024 | SSH :2222 # Site: https://git.hacktivism.ch | HTTP :9024 | SSH :9200
services: services:
forgejo: forgejo:
image: codeberg.org/forgejo/forgejo:11-rootless image: codeberg.org/forgejo/forgejo:11-rootless
@ -20,7 +20,7 @@ services:
FORGEJO__server__SSH_DOMAIN: git.hacktivism.ch FORGEJO__server__SSH_DOMAIN: git.hacktivism.ch
FORGEJO__server__ROOT_URL: https://git.hacktivism.ch/ FORGEJO__server__ROOT_URL: https://git.hacktivism.ch/
FORGEJO__server__HTTP_PORT: "3000" FORGEJO__server__HTTP_PORT: "3000"
FORGEJO__server__SSH_PORT: "2222" FORGEJO__server__SSH_PORT: "9200"
FORGEJO__server__SSH_LISTEN_PORT: "2222" FORGEJO__server__SSH_LISTEN_PORT: "2222"
FORGEJO__server__START_SSH_SERVER: "true" FORGEJO__server__START_SSH_SERVER: "true"
FORGEJO__server__DISABLE_SSH: "false" FORGEJO__server__DISABLE_SSH: "false"
@ -41,7 +41,7 @@ services:
FORGEJO____APP_NAME: "hacktivism git" FORGEJO____APP_NAME: "hacktivism git"
ports: ports:
- "9024:3000" - "9024:3000"
- "2222:2222" - "9200:2222"
volumes: volumes:
- ./data:/var/lib/gitea - ./data:/var/lib/gitea
- ./config:/etc/gitea - ./config:/etc/gitea
@ -53,7 +53,7 @@ services:
org.hacktivism.service: forgejo org.hacktivism.service: forgejo
org.hacktivism.variant: rootless org.hacktivism.variant: rootless
org.hacktivism.host_port: "9024" org.hacktivism.host_port: "9024"
org.hacktivism.ssh_port: "2222" org.hacktivism.ssh_port: "9200"
org.hacktivism.site: git.hacktivism.ch org.hacktivism.site: git.hacktivism.ch
org.hacktivism.managed_by: koopa-admin org.hacktivism.managed_by: koopa-admin
healthcheck: healthcheck: